AI's Growing Role in Cybercrime: Insights from CrowdStrike's Threat Hunting Report

AI-Powered Cybercrime Operations

• 💡 Artificial intelligence is being increasingly weaponized by cybercriminals to speed up operations and automate tasks, particularly in ransomware attacks.
• 🚀 Nation-state actors are leveraging AI for advanced tactics, including generating disinformation, misinformation, fake videos, and fake messages.
• 🔍 AI is also used by threat actors to avoid detection and to profile computer systems for valuable data.

AI in Social Engineering and Recruitment

• 🎯 Generative AI, specifically large language models, is used to create convincing fake LinkedIn profiles and resumes to attract recruiters.
• 🎭 During interviews, AI is employed to answer questions for candidates, sometimes in real-time while the candidate is speaking and typing.
• 🎭 Deep fake technology is used to alter a person's appearance during video interviews, making them appear as someone else.
• 💼 The ultimate goal for some is to use AI to perform the job itself, allowing individuals to hold multiple full-time positions simultaneously.

State-Sponsored AI Cyber Tactics

• ⚠️ North Korea is noted for using AI in malware for mobile devices, employing optical character recognition to scan photos for keywords.
• 🇮🇷 Iran uses generative AI to create personas for social media outreach, targeting individuals like deployed troops with fake attractive profiles.
• 🇷🇺 Russia integrates AI into malware, allowing malicious programs to communicate with LLMs to profile systems and exfiltrate data, thereby evading traditional detection methods.

Countering AI-Driven Cyber Threats

• 🛡️ Cybersecurity defenders face the challenge of being right 100% of the time, while adversaries only need to succeed once.
• 🤝 CrowdStrike advocates for collaboration with HR teams to detect AI-driven infiltration tactics, suggesting simple tests like asking candidates to touch their face, which can reveal deep fake glitches.
• ⚡ CrowdStrike utilizes its own AI tool, Charlotte AI, to empower defenders, making them more efficient and enabling them to operate at scale against advanced threat actors.